{"id":696,"date":"2017-04-27T01:49:00","date_gmt":"2017-04-27T01:49:00","guid":{"rendered":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/2017\/04\/27\/lege-trend-8-elements-data-breach-notification-that-outs-the-hackers\/"},"modified":"2017-04-27T01:49:00","modified_gmt":"2017-04-27T01:49:00","slug":"lege-trend-8-elements-data-breach-notification-that-outs-the-hackers","status":"publish","type":"post","link":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/lege-trend-8-elements-data-breach-notification-that-outs-the-hackers\/","title":{"rendered":"Lege Trend. 8 Elements. Data Breach Notification that outs the hackers."},"content":{"rendered":"<p>South Africa recently enacted a new data breach notification law that requires companies to:<\/p>\n<ul>\n<li>Notification by the company will have to <strong>factor in\u00a0the needs of law enforcement <\/strong>\n<ul>\n<li>Delay is only permitted if it undermines or impedes an investigation<\/li>\n<\/ul>\n<\/li>\n<li>Companies are asked to<strong>\u00a0restore the integrity of their\u00a0information <\/strong>system.<\/li>\n<li>\u00a0Notification itself must be <strong>in writing<\/strong>\u00a0 either via email or regular mail\u00a0<\/li>\n<li><strong>Alternative notification<\/strong> if mail fails, is\u00a0\u00a0prominent position on the website, published in the media; or as directed by the Information Regulator.<\/li>\n<li>The notification must provide <strong>sufficient information to allow the person whose information was compromised\u00a0to take protective measures <\/strong>against the potential consequences of the compromise.<\/li>\n<\/ul>\n<ul>\n<li>Notice must describe\u00a0measures taken by the company\u00a0\u00a0to address the security breach<\/li>\n<li>Notice must include <strong>recommendation on what measures \u00a0the person whose information was compromised should take to mitigate<\/strong> the possible adverse effects of the breach.<\/li>\n<\/ul>\n<ul>\n<li>If known to the company, the <strong>identity of the unauthorised person who may have accessed or acquired the personal information <\/strong>must also be divulged to the data subject.<\/li>\n<\/ul>\n<p><a href=\"https:\/\/businesstech.co.za\/news\/technology\/171357\/south-african-companies-will-soon-be-forced-to-inform-customers-of-a-data-breach-by-law\/\">Business Tech\u00a0|\u00a0SA companies will soon be forced to tell customers of a data breach by law\u200b<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>South Africa recently enacted a new data breach notification law that requires companies to:<\/p>\n<ul>\n<li>Notification by the company will have to <strong>factor in\u00a0the needs of law enforcement <\/strong>\n<ul>\n<li>Delay is only permitted if it undermines or impedes an investigation<\/li>\n<\/ul>\n<\/li>\n<li>Companies are asked to<strong>\u00a0restore the integrity of their\u00a0information <\/strong>system.<\/li>\n<li>\u00a0Notification itself must be <strong>in writing<\/strong>\u00a0 either via email or regular mail\u00a0<\/li>\n<li><strong>Alternative notification<\/strong> if mail fails, is\u00a0\u00a0prominent position on the website, published in the\u2026<\/li>\n<\/ul>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,2,3,24],"tags":[],"class_list":["post-696","post","type-post","status-publish","format-standard","hentry","category-2017-legislative-issue","category-data-privacy","category-legislative-trend","category-private-corporations","entry"],"_links":{"self":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/696","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/comments?post=696"}],"version-history":[{"count":0,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/696\/revisions"}],"wp:attachment":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/media?parent=696"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/categories?post=696"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/tags?post=696"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}